- observium - lists.observium.org

syslog regex
by MKS 17 Oct '16

17 Oct '16

Hello list I'm having some problems with syslog alerts. RP/0/RSP0/CPU0:Oct 17 11:44:17.872 : isis[1010]: %ROUTING-ISIS-5-ADJCHANGE : Adjacency to ****** (Bundle-Ether1.7) (L2) Down, Holdtime expired RP/0/RSP0/CPU0:Oct 17 11:46:05.893 : isis[1010]: %ROUTING-ISIS-5-ADJCHANGE : Adjacency to ******* (Bundle-Ether1.7) (L2) Up, New adjacency I'm using the regex "/Adjacency.*Up/" and "/Adjacency.*Down/" The "/Adjacency.*Up/" alert is working fine, but the combo Adjacency and Down doesn't alert. If I match only on Adjacency or only on Down I do get an alert, both these two together don't work as expected. Any workarounds or a different regex I should use? Regards MKS

2 2

Re: [Observium] Include interface description/alias in Alerts
by Moerman, Maarten 17 Oct '16

17 Oct '16

It should be in the email that you get. You must be running a really old version then? Maarten From: observium <observium-bounces(a)observium.org<mailto:observium-bounces@observium.org>> on behalf of Gumilar Siegfried <siegfried.gumilar(a)stadtwerke-feldkirch.at<mailto:siegfried.gumilar@stadtwerke-feldkirch.at>> Reply-To: Observium Network Observation System <observium(a)observium.org<mailto:observium@observium.org>> Date: Monday, October 17, 2016 at 3:07 PM To: "Observium Network Observation System (observium(a)observium.org<mailto:observium@observium.org>)" <observium(a)observium.org<mailto:observium@observium.org>> Subject: [Observium] Include interface description/alias in Alerts Hello! I have configured an alert checker for our Ports according to the documentation: Port is enabled, but operationally down Port ifAdminStatus equals up ifOperStatus notequals up ALL * ifType equals ethernetCsmacd Everything works fine, except the alerts only include the port number (e.g. Entity: Port13). I would like to include the interface description/alias too (e.g. Customer_xyz). Is there a way I can achieve this? Regards Siegfried

1 0

Include interface description/alias in Alerts
by Gumilar Siegfried 17 Oct '16

17 Oct '16

Hello! I have configured an alert checker for our Ports according to the documentation: Port is enabled, but operationally down Port ifAdminStatus equals up ifOperStatus notequals up ALL * ifType equals ethernetCsmacd Everything works fine, except the alerts only include the port number (e.g. Entity: Port13). I would like to include the interface description/alias too (e.g. Customer_xyz). Is there a way I can achieve this? Regards Siegfried

1 0

Observium Port Group alerts?
by Tomas 17 Oct '16

17 Oct '16

Hello, Simple question: Does Observium can add alert checker on group? For example, we have port group for x devices, so if we adding port alert we have to fill up Device Assocation and entity Association again. Thanks, Thom

4 6

Frontpage Map
by Zoellers, Billy 17 Oct '16

17 Oct '16

Looks like it's now defaulting to OpenStreetMap. I think it looks better, but it looks like none of my map config settings are working now. Are there new settings to use? For example: $config['frontpage']['map']['region'] = "US-KY"; $config['frontpage']['map']['resolution'] = "provinces"; $config['frontpage']['map']['zoom'] = "9"; $config['frontpage']['map']['center']['lat'] = "38.029"; $config['frontpage']['map']['center']['lng'] = "-84.496"; $config['frontpage']['map']['realworld'] = true; $config['frontpage']['map']['dotsize'] = 1; $config['frontpage']['map']['height'] = 450; [cid:DeanDortonbox.png] Billy Zoellers Infrastructure Engineer 106 W. Vine St., Ste 600 Lexington, KY 40507 ph (859) 425-7640 fax (859) 425-3640 CONFIDENTIALITY NOTICE: The preceding email message, and any files or attachments transmitted with it, may contain confidential and privileged information, and may constitute protected work product, confidential client information, trade secrets, and/or other non-public information. Furthermore, this message and any attachments may be protected by accountant/client privilege, attorney/client privilege, and/or other applicable privileges. Any unauthorized review, use, dissemination, distribution, disclosure, or reproduction of this message is strictly prohibited and may be unlawful. This message is intended to be conveyed and transmitted only to the designated recipient(s). If you are not an intended recipient of this message, please notify the sender immediately by email or by telephone at 859-255-2341. Also, please delete this email message including all attachments and destroy all copies. -- This mail was scanned by BitDefender For more information please visit http://www.bitdefender.com/frams/

3 3

syslog integration issue
by Grégory Lemblé 15 Oct '16

15 Oct '16

Morning, I try to implement the syslog.php features inside our Observium instance. on debug mode, we got syslog info inside the logs/debug.log file. But on the web side, impossible to get any message from the syslog. I'm not sure which area i need to investigate to get it done. Some help will be appreciate. Many Thanks ----------- Observium Version Pro 0.16.10.8118 (Stable) ----------- rsyslogd 7.4.4, compiled with: FEATURE_REGEXP: Yes FEATURE_LARGEFILE: No GSSAPI Kerberos 5 support: Yes FEATURE_DEBUG (debug build, slow code): No 32bit Atomic operations supported: Yes 64bit Atomic operations supported: Yes Runtime Instrumentation (slow code): No uuid support: Yes ----------- /etc/rsyslog.d/60-observium.conf: #--------------------------------------------------------- #send remote logs to observium $template observium,"%fromhost%||%syslogfacility%||%syslogpriority%||%syslogseverity%||%syslogtag%||%$year%-%$month%-%$day% %timereported:8:25%||%msg%||%programname%\n" $ModLoad omprog $ActionOMProgBinary /var/www/observium/syslog.php :inputname, isequal, "imudp" :omprog:;observium #& ~ & stop #--------------------------------------------------------- ----------- debug.log file: [2016/10/10 08:00:15 +0800] syslog.php(19124): hostname||1||4||4||auth:||2016-10-10 08:00:14|| User XXXXXXXXXXXX logout||auth [2016/10/10 08:00:15 +0800] syslog.php(19124): hostname||1||6||6||Security:||2016-10-10 08:00:15|| SSH login by public key from src IP XXXXXXX from src MAC XXXXX to USER EXEC mode using DSA as Server Host Key. ||Security ----------- config.php: $config['syslog']['debug'] = True; $config['enable_syslog'] = 1; // Enable Syslog $config['syslog']['fifo'] = FALSE; Front Web: No syslog entries found!Check that the syslog daemon and Observium configuration options are set correctly, that your devices are configured to send syslog to Observium and that there are no firewalls blocking the messages. See documentation <http://www.observium.org/wiki/Category:Documentation> and configuration options <http://www.observium.org/wiki/Configuration_Options#Syslog_Settings> for more information

2 2

Maintenance and down devices
by Jesse Defer 14 Oct '16

14 Oct '16

I've made a small change to change how down devices are displayed when in maintenance mode that seems generally useful enough to include in the distro. It scratches my itch of being able to quickly see what downed devices have scheduled maintenace. It would probably be useful to extend to more areas like the color of device links and other entities. In html/includes/print/status.inc.php (about line 66): if (isset($GLOBALS['cache']['maint']['device'][$device['device_id']])) $string .= ' <td><span class="label label-info">Device Down (Maintenance)</span></td>' . PHP_EOL; else $string .= ' <td><span class="label label-important">Device Down</span></td>' . PHP_EOL; Jesse

2 1

Unable to add Host
by Matt Vinson 13 Oct '16

13 Oct '16

I noticed the Wowza MIB was in a recent update from SVN so I tried adding one of my hosts to our Observium server and it states: No reply on community t-public-ss using v2c. Could not reach 'HOSTNAME' with given SNMP parameters using v2c. I have done an snmpwalk from the Observium server to the host in question and it works properly. Anybody have any idea why I can't add this host? Thanks! -- Regards, Matt Vinson --- This email has been checked for viruses by Avast antivirus software. https://www.avast.com/antivirus

4 12

Add Mib and counter
by Jean CARUSO 13 Oct '16

13 Oct '16

hello, I'm new to the list. What is the procedure to add the MIBs manufacturer Huawei but the storage part Observium? I have them if needed Another question: Can you add to the manufacturer NetApp counters the snapmirror functionality. thank you in advance Regards [Description : E:\ADMINISTRATIF\Exemple Formulaire\ADMENTIS\ADMENTIS LOGO (1)\LOGO DOCUMENTS INTERNE\LOGO RVB ADM V1.jpg] Jean CARUSO Consultant Tél. : +334 42 24 37 97 Fax : +334 42 90 58 40 Gsm : +336 71 38 17 50 @ : jcaruso(a)admentis.fr<mailto:jcaruso@admentis.fr> P Imprimez seulement si nécessaire - Print only if necessary Ce message peut contenir des informations confidentielles, couvertes par le secret professionnel ou réservées exclusivement à leur destinataire. Toute lecture, utilisation, diffusion ou divulgation sans autorisation expresse est rigoureusement interdite. Si vous n'en êtes pas le destinataire, merci de prendre contact avec l'expéditeur et de détruire ce message. This email may contain material that is confidential, privileged and/or attorney work product for the sole use of the intended recipient. Any review, reliance or distribution by others or forwarding without express permission is strictly prohibited. If you are not the intended recipient, please contact the sender and delete all copies.

1 0

GraphViz Maps
by Andy Lemin 11 Oct '16

11 Oct '16

Hi Observium users, Re; GraphViz.js based maps built using; https://github.com/kedare/observium_map_generator https://gist.github.com/kedare/9806171 Hi, Their are a couple of graphing tools out there that use the "links" table, which does not seem to exist. Is there a replacement table that details the connections between devices? For example this no longer works :( SELECT UPPER(d.hostname) AS local_hostname, p.port_id AS local_port_id, p.ifName AS local_port, p.ifSpeed/1000000 as local_port_speed, l.remote_port_id AS remote_port_id, rp.ifName AS remote_port, UPPER(l.remote_hostname) AS remote_hostname, d.hardware AS hardware, rd.hardware AS remote_hardware, s.ifInErrors_rate AS local_in_errors_rate, s.ifOutErrors_rate AS local_out_errors_rate, s.ifInOctets_rate*8 AS local_in_octets_rate, s.ifOutOctets_rate*8 AS local_out_octets_rate, s.ifInOctets_perc AS local_in_octets_perc, s.ifOutOctets_perc AS local_out_octets_perc FROM `devices` AS d, `devices` as rd, `ports` AS p, `ports` as rp, `links` AS l, `ports-state` AS s WHERE p.port_id = l.local_port_id AND p.device_id = d.device_id AND rp.port_id = l.remote_port_id AND rp.device_id = rd.device_id AND p.port_id = s.port_id AND UPPER(d.hostname) = UPPER(%s); Thanks, Andy.

2 1

Billing Module Problem
by Andy Lemin 11 Oct '16

11 Oct '16

Hi, We are running the latest paid version, and turned on Billing last week. The cronjob is running fine but nothing comes up in the web interface? We followed; http://www.observium.org/docs/billing/ conrtab -l shows; # Billing */5 * * * * root php /opt/observium/poll-billing.php >> /dev/null 2>&1 1 * * * * root php /opt/observium/billing-calculate.php >> /dev/null 2>&1 And we have this in our config.php; // Billing $config['enable_billing'] = 1; # Enable Billing $config['billing']['customer_autoadd'] = 1; # Enable Auto-add bill per customer $config['billing']['circuit_autoadd'] = 1; # Enable Auto-add bill per circuit_id $config['billing']['bill_autoadd'] = 1; # Enable Auto-add bill per bill_id However nothing is being auto added? So we added a bill manually, and when running the cronjob scripts manually all seems to work fine, but after leaving it for a week (so data could build up) we still see this JpGraph error; Thanks, Andy.

3 20

Billing Graphs 2 hours ahead
by Lyndon Labuschagne 11 Oct '16

11 Oct '16

HI All Can anyone point me in the right direction? The billing graphs are working well, but for some reason the graph is 2 hours ahead. I assumed it may be the date.timezone setting in php.ini but that wasn't it. Thought it may have been the router time zone or incorrect NTP info, but that is also correct. The Last Polled and Last Calculated times are correct. Im sure its something simple that I am missing, but I can't fine it.

2 3

Authentication via FreeIPA
by Zarko Dudic 10 Oct '16

10 Oct '16

Hi there I want to be good citizens and check first Archives but this link was not found. http://postman.memetic.org/pipermail/observium/ Anyway, I try configuring Observium (*Observium CE *0.16.1.7533) to authenticate via LDAP, it's FreeIPA server using 389 Directory Service for ldap service. Unfortunately I can't make it to login. 1) The config.php reads: $config['auth_ldap_version'] = 3; // v2 or v3 $config['auth_ldap_server'] = "ca-ldap01.x.com"; $config['auth_ldap_port'] = 389; $config['auth_ldap_starttls'] = OPTIONAL; $config['auth_ldap_prefix'] = "uid="; $config['auth_ldap_suffix'] = ",cn=users,cn=accounts,dc=us,dc=x,dc=com"; $config['auth_ldap_attr']['uid'] = "uid"; // LDAP attribute containing user login name $config['auth_ldap_attr']['uidNumber'] = "uidNumber"; // LDAP attribute containing numeric user ID $config['auth_ldap_attr']['dn'] = "dn"; // LDAP attribute containing user's DN $config['auth_ldap_attr']['gidNumber'] = "gidNumber"; // LDAP attribute containing group id number $config['auth_ldap_objectclass'] = "posixaccount"; // objectClass to filter out valid users, use * for all objects under ldap_suffix tree $config['auth_ldap_groupmemberattr'] = "memberUid"; 2) Wireshark on Observium system gives: 1 0.000000000 observium-ip -> ldap-ip TCP 74 42240 > ldap [SYN] Seq=0 Win=14600 Len=0 MSS=1460 SACK_PERM=1 TSval=2573095638 TSecr=0 WS=128 2 0.006589311 ldap-ip -> observium-ip TCP 74 ldap > 42240 [SYN, ACK] Seq=0 Ack=1 Win=14480 Len=0 MSS=1460 SACK_PERM=1 TSval=327213350 TSecr=2573095638 WS=128 3 0.006626711 observium-ip -> ldap-ip TCP 66 42240 > ldap [ACK] Seq=1 Ack=1 Win=14720 Len=0 TSval=2573095644 TSecr=327213350 4 0.006747394 observium-ip -> ldap-ip LDAP 144 bindRequest(1) "uid=zarko,cn=users,cn=accounts,dc=us,dc=x,dc=com" simple 5 0.013069430 ldap-ip -> observium-ip TCP 66 ldap > 42240 [ACK] Seq=1 Ack=79 Win=14592 Len=0 TSval=327213357 TSecr=2573095644 6 0.603341264 ldap-ip -> observium-ip LDAP 80 bindResponse(1) success 7 0.603369077 observium-ip -> ldap-ip TCP 66 42240 > ldap [ACK] Seq=79 Ack=15 Win=14720 Len=0 TSval=2573096241 TSecr=327213947 8 0.603652020 observium-ip -> ldap-ip LDAP 149 searchRequest(2) "cn=users,cn=accounts,dc=us,dc=x,dc=com" wholeSubtree 9 0.610210283 ldap-ip -> observium-ip TCP 66 ldap > 42240 [ACK] Seq=15 Ack=162 Win=14592 Len=0 TSval=327213954 TSecr=2573096241 10 0.614501121 ldap-ip -> observium-ip LDAP 3377 searchResEntry(2) "uid=zarko,cn=users,cn=accounts,dc=us,dc=x,dc=com" | searchResDone(2) success 11 0.614533639 observium-ip -> ldap-ip TCP 66 42240 > ldap [ACK] Seq=162 Ack=3326 Win=21248 Len=0 TSval=2573096252 TSecr=327213958 12 0.615170867 observium-ip -> ldap-ip LDAP 144 bindRequest(3) "uid=zarko,cn=users,cn=accounts,dc=us,dc=x,dc=com" simple 13 0.628537773 ldap-ip -> observium-ip LDAP 80 bindResponse(3) success 14 0.635412239 observium-ip -> ldap-ip LDAP 73 unbindRequest(4) 15 0.635506320 observium-ip -> ldap-ip TCP 66 42240 > ldap [FIN, ACK] Seq=247 Ack=3340 Win=21248 Len=0 TSval=2573096273 TSecr=327213973 16 0.642012247 ldap-ip -> observium-ip TCP 66 ldap > 42240 [FIN, ACK] Seq=3340 Ack=248 Win=14592 Len=0 TSval=327213986 TSecr=2573096273 17 0.642029914 observium-ip -> ldap-ip TCP 66 42240 > ldap [ACK] Seq=248 Ack=3341 Win=21248 Len=0 TSval=2573096280 TSecr=327213986 3) Ldap logs read: conn=348 fd=83 slot=83 connection from observium-ip to ldap-ip conn=348 op=0 BIND dn="uid=zarko,cn=users,cn=accounts,dc=us,dc=x,dc=com" method=128 version=3 conn=348 op=0 RESULT err=0 tag=97 nentries=0 etime=0 dn="uid=zarko,cn=users,cn=accounts,dc=us,dc=x,dc=com" conn=348 op=1 SRCH base="cn=users,cn=accounts,dc=us,dc=x,dc=com" scope=2 filter="(uid=zarko)" attrs=ALL conn=348 op=1 RESULT err=0 tag=101 nentries=1 etime=0 conn=348 op=2 BIND dn="uid=zarko,cn=users,cn=accounts,dc=us,dc=x,dc=com" method=128 version=3 conn=348 op=2 RESULT err=0 tag=97 nentries=0 etime=0 dn="uid=zarko,cn=users,cn=accounts,dc=us,dc=x,dc=com" conn=348 op=3 UNBIND conn=348 op=3 fd=83 closed - U1 conn=67 op=22 SRCH base="ou=sessions,ou=Security Domain,o=ipaca" scope=2 filter="(objectClass=securityDomainSessionEntry)" attrs="cn" conn=67 op=22 RESULT err=0 tag=101 nentries=0 etime=0 conn=15 op=1354 SRCH base="ou=group,dc=ignore,dc=me" scope=1 filter="(&(objectClass=posixGroup)(gidNumber=1001))" attrs="cn gidNumber userPassword memberUid" conn=15 op=1354 RESULT err=32 tag=101 nentries=0 etime=0 conn=15 op=1355 SRCH base="cn=users,cn=accounts,dc=us,dc=x,dc=com" scope=1 filter="(&(objectClass=posixAccount)(uidNumber=1001))" attrs="cn uid uidNumber gidNumber gecos description homeDirectory loginShell" conn=15 op=1355 RESULT err=0 tag=101 nentries=0 etime=0 4) Thanks in advance for any suggestion or troubleshooting tips. -- Thanks, Zarko

3 9

Question about PDF | CSV Reports
by Francisco José Sánchez Iruela 10 Oct '16

10 Oct '16

Hi All, Anyone know if Could I get a report billing (.pdf or .csv) at the end of each month for each customer (Bill) ?? Best regards, -- Francisco José Sánchez IruelaDepartamento de redes <http://www.cartagon.com/> *Tel.* 902 998 398 – (+34) 91 020 11 32 - *Extensión 2105* *Fax.* 902 998 374 – (+34) 91 362 46 46 *E-mail.* fjsanchez(a)cartagon.com Calle Urano 50, 28760, Tres Cantos. Madrid *Web.* www.cartagon.com <https://www.linkedin.com/company/cartagon> <https://twitter.com/cartagon>

1 0

Discover new devices problem
by zois roupas 10 Oct '16

10 Oct '16

Hello everyone, Great Documentation and so far it's a great tool. One question though because i can't find a way to get auto discover new devices to work. Everything works great when adding the device ./add_device.php <ip> public v2c but when running ./discovery.php -h new , 0 devices discovered. I guess it's not a problem with the SNMP cause it wouldn't work with the manual ip addition, right? So the next step was to check the hosts file from the observium server. so this is the config 192.168.1.2 test-01.home.com #(machine to discover) The sysName variable from the machine that i want to discover is Linux test-01 3.10.0-327.36.1.el7.x86_64 #1 SMP Sun Sep 18 13:04:29 UTC 2016 x86_64 x86_64 The firewall is disabled in both machines Sorry for the trouble but what am i missing here? Thanks for the time Zois

1 0

syslog integration issue
by Grégory Lemblé 10 Oct '16

10 Oct '16

Morning, I try to implement the syslog.php features inside our Observium instance. on debug mode, we got syslog info inside the logs/debug.log file. But on the web side, impossible to get any message from the syslog. I'm not sure which area i need to investigate to get it done. Some help will be appreciate. Many Thanks ----------- Observium Version Pro 0.16.10.8118 (Stable) ----------- rsyslogd 7.4.4, compiled with: FEATURE_REGEXP: Yes FEATURE_LARGEFILE: No GSSAPI Kerberos 5 support: Yes FEATURE_DEBUG (debug build, slow code): No 32bit Atomic operations supported: Yes 64bit Atomic operations supported: Yes Runtime Instrumentation (slow code): No uuid support: Yes ----------- /etc/rsyslog.d/60-observium.conf: #--------------------------------------------------------- #send remote logs to observium $template observium,"%fromhost%||%syslogfacility%||%syslogpriority%||% syslogseverity%||%syslogtag%||%$year%-%$month%-%$day% %timereported:8:25%||%msg%||%programname%\n" $ModLoad omprog $ActionOMProgBinary /var/www/observium/syslog.php :inputname, isequal, "imudp" :omprog:;observium #& ~ & stop #--------------------------------------------------------- ----------- debug.log file: [2016/10/10 08:00:15 +0800] syslog.php(19124): hostname||1||4||4||auth:||2016-10-10 08:00:14|| User XXXXXXXXXXXX logout||auth [2016/10/10 08:00:15 +0800] syslog.php(19124): hostname||1||6||6||Security:||2016-10-10 08:00:15|| SSH login by public key from src IP XXXXXXX from src MAC XXXXX to USER EXEC mode using DSA as Server Host Key. ||Security ----------- config.php: $config['syslog']['debug'] = True; $config['enable_syslog'] = 1; // Enable Syslog $config['syslog']['fifo'] = FALSE; ------------- Front Web: No syslog entries found!Check that the syslog daemon and Observium configuration options are set correctly, that your devices are configured to send syslog to Observium and that there are no firewalls blocking the messages. See documentation <http://www.observium.org/wiki/Category:Documentation> and configuration options <http://www.observium.org/wiki/Configuration_Options#Syslog_Settings> for more information

1 0

Re: [Observium] Auto discovery
by Mikey van der Worp 07 Oct '16

07 Oct '16

To whom it may concern, Currently we are having some issues with Observium's Auto Discovery. The problem is that it currently only discovers about 10% of the network. Does somebody have a clue on how to fix this issue? We already disabled the option "require valid hostnames" at the auto discovery settings. Unfortunately after changing this option, it only discovered about 10 more devices. Also we do not have any problems with the CDP neighbours on our switches. Best regards, Mikey van der Worp -- Mikey van der Worp System Engineer Utelisys Communications B.V. Trinity Buildings Tower A, 7th floor Pietersbergweg 15 1105BM Amsterdam M +31 (0) 62 942 2052 T +31 (0) 20 561 8010 F +31 (0) 20 561 8021 www.utelisys.com<http://www.utelisys.com> - https://www.utelisys.com/

3 2

Unable to save sensor values
by Robert Williams 07 Oct '16

07 Oct '16

Hi, On devices with large numbers of sensors it appears that I'm unable to set custom limits any more. I'm sure there used to be something about a maximum number of rows to be updated (a SQL setting?) but I can't remember or find any reference of it. The path to the page is: /device/device=XXX/tab=edit/section=sensors/ I don't get any errors when applying, but, as soon as the page refreshes the old settings are back. In fact, any change on the sensors page fails (setting custom values, disabling alerts, enabled custom limits etc.). It works fine on all devices with lower numbers of sensors. These ASR9k have well over 150 I reckon, maybe more, it's hard to count. Anyway, can someone remind me of the SQL tweak for this? Or is this a bug? Cheers! Robert Williams Custodian Data Centre Email: Robert(a)CustodianDC.com http://www.CustodianDC.com

2 2

Restrict alerts to HA active F5 only
by Daniel Horth 06 Oct '16

06 Oct '16

Hi all I have an alert checker set up to monitor our F5 BIG-IP devices, alerting administrators if they forget to syncronise config after making changes. My alert looks like this: Device Match: * Entity Match: status_type equals f5-config-sync-state Test conditions (Require all): status_name notequals inSync status_name notequals standalone This is working great, however to reduce spamminess of alerts I am looking to only send the alert for the primary (HA active) device; when an additional status_type / condition match is true, i.e.: Entity Match: status_type equals f5-ha-state Test conditions: status_name equals active Is it possible to have alert checkers trigger based upon groups of entity matches like this? Am I approaching this in the wrong way? Thanks Dan

1 0

Syslog Alerts
by Brad Bendy 05 Oct '16

05 Oct '16

Hi, First off, the last few revisions have been killer, it's getting better every few weeks it seems, thanks! Ive setup some syslog alerts and I see under "syslog alerts" it will show a entry and "notified" will be no, then it appears after a few minutes this changes to yes and send the notification. It looks like it does not send the message until it sees more then X number of messages, It's sent after I get this in the logs: 2016-10-04 20:53:13Error (3)LAST message repeated 10 times 2016-10-04 20:52:47Error (3)LAST message repeated 7 times 2016-10-04 20:52:33Error (3)XNTPD NTP Server Unreachable Is this documented somewhere and Im missing it? Just trying to see when the message gets fired off. We were using some janky omprog code to send alerts that were "instant" but rather have Observium send them as it's much cleaner all around, but some alerts we want to get on the very first message and right away as they are critical. I noticed the syslog rules severity of a 8, im guessing eventually that will control how "sensitive" the alerts go out maybe? Thanks

1 0

CBQoS Issue & Temperature
by Talk Jesus 05 Oct '16

05 Oct '16

Hello First thing, does the attach show anything I need to be concerned about? The warnings, although 6 days ago I'm not understanding where they came from. These are new switches, all 3 fans installed and green lights. Airflow sufficient and cooled. Secondly, I have 3 ports showing a CBQoS error. I checked and see it's due to packet loss because of rate limiting policy set previously. Running Cisco 3650. I've removed the policies from each of the port's VLANs assigned over an hour ago and Observium is still showing as the policies in place? It polled ample times on all ports but not quite sure why it's still showing the policies and errors? I did notice at least that it showed no packet loss once I removed the policies, but the error bubble is still there and it still shows the policy name when viewing the CBQoS page for the ports. >From the Switch Switch2#conf t Enter configuration commands, one per line. End with CNTL/Z. Switch2(config)#int gi2/0/14 Switch2(config-if)#no service-policy output speed25 % policy map speed25 not configured Switch2#sh platform qos policies port Policy: None in the list Switch2#show run interface gi2/0/14 Building configuration... Current configuration : 113 bytes ! interface GigabitEthernet2/0/14 description Server 19 switchport access vlan 19 switchport mode access end

1 0

alerts
by Célia LAMY 04 Oct '16

04 Oct '16

Hello, I created three alerts for all of my servers. I'm not getting the alerts both servers. For others it works. How to do ? I use Observium CE 0.16.1.7533. Cordialement -- Célia LAMY Service Informatique ACTES SUD Place Nina Berberova, 13200 Arles Tél : 04 88 65 90 25

5 6

Billing update
by Eduardo Schoedler 04 Oct '16

04 Oct '16

Hi, I just added a port to a billing, so I imagine observium is going to calculate since today, right? However, today is day 3. How can I generate statistics for a specific billing since day 1? Thank you. Regards, -- Eduardo Schoedler

3 7

Alert on failed HDD
by Fredrik Winäs 04 Oct '16

04 Oct '16

Hi Did a test on a Linux (Ubuntu 16 on a Supermicro SYS-6017R-73HDP+) machine to see if we could get an alert when a HDD fails. The machine isn't using any RAID , just a plain mount of a partition to a mount point. I have configured IPMI in Observium to. The test (a bit brutal..) was to just remove the HDD when the server was ON. I did not see anything in Observium about the missing drive. What can I do so I can set up an alert checker notifying me about a failed drive? Will the unix_agent give me more info on this? Med Vänlig Hälsning Fredrik Winäs tel +46 31 762 02 43 fredrik.winas(a)cgit.se<mailto:fredrik.winas@cgit.se> www.cgit.se<http://www.cgit.se/> CGit AB Taljegårdsgatan 11C SE-431 53 Mölndal [cid:image001.png@01D21E53.0889E7A0]

1 0

Custom OID in observium community edition
by Janusz Janik 03 Oct '16

03 Oct '16

Hi, Is there any way to enable _custom oid_ option in observium community edition menu? Or is this option requires subscription version of observium? PS We use observium: > > Version Information > > *Observium CE* 0.16.9.8118 (30th September 2016) > Thank you for your response. Best regards, Janusz Janik -- Pozdrawiam, Janusz Janik

2 1

SLA : Search box/global search?
by Johann Mallet 30 Sep '16

30 Sep '16

Hello, It's possible to activate the SLAs search from the global search box? Another question : Search box in the SLA page is planned in the future? We have 2040 SLA (and many more in the future (>10k)). It's complicated for the support's guys :-) Thanks, Johann

2 2

Custom alerts without using checkers
by Andy Lemin 30 Sep '16

30 Sep '16

Hi, We have many custom scripts, and we would like those scripts to be able to send custom alerts into Observium. What is the best way to do this? We would not be able to use "Alert checks".. Or is there a special trap that we can use for this where we can define the Alert message string in the trap packet? Cheers, Andy.

1 0

Responsive Mode
by chad＠talkjesus.com 30 Sep '16

30 Sep '16

Anyone familiar with any possible mobile friendly, responsive them or even app? I searched intently and found only one app that hasn't been updated in years.

2 1

Wowza MIB
by Matt Vinson 30 Sep '16

30 Sep '16

How does one go about requesting MIB support? Or alternatively, adding MIB support manually to one's own server? Wowza Streaming Engine just recently added SNMP and developed their own MIB. It would be extremely useful for us to be able to monitor this application in depth. Documentation: https://www.wowza.com/forums/content.php?831-How-to-use-SNMP-in-Wowza-Strea… MIB: https://www.wowza.com/downloads/forums/snmp/WowzaStreamingEngineMIB.zip -- Regards, Matt Vinson TSS Digital Services matt.vinson(a)tssdigital.com 360.915.1100 --- This email has been checked for viruses by Avast antivirus software. https://www.avast.com/antivirus

4 4

email alert template tuning
by Boyard Engels 30 Sep '16

30 Sep '16

Hey Team, I am keen to reduce the information that is sent from Observium via the email alerts. Is there any information available on how to tune the alert emails? Thanks!! Bo

1 0

High CPU load on Cisco S500G Small business switches
by Jamie Tynan 29 Sep '16

29 Sep '16

Hi, We've noticed an issue with Cisco SG500 switches and Observium, where if you enable stacking mode (the default on the switch), regardless of if it is in a stack or not, the CPU reports a 50% average. Our investigations show it runs at 95% + for a couple of minutes whilst Observium is polling it, then drops back down to <10% when the query finishes. Turning stacking mode off drops the average CPU to <10% and CPU does not ramp up and down. We raised a case with Cisco TAC, who said this is "expected behaviour": >>> At every 5 min cycle, the CPU rises to 85- 95% temporarily and then drops down. The reason for this is, Observium is checking for interface status. When switch is in standalone mode the interface count database is the max switch capacity. Example 48 ports = 48 ports plus channel ports ~ 60 ports In stack mode the predefined port count in the data base is around 880 ports. While the switch is responding to SNMP get , it is using up resources and that is why the CPU utilization will be high. While I was testing it, I did not see or encountered any network outage or Web access issues. We have already made an enhancement request for this behaviour, to limit the port count to any stack configuration. >>> Has anyone else encountered anything similar? Adam - I realise that Observium is only polling what the switch is reporting, but if Observium can ascertain how many switches are in the stack, would it be possible to limit polling to only query active/connected stack members? Thanks, Jamie

2 4

Alcatel Lucent : Strange "Interface changed: [ifConnectorPresent]" flood
by Johann Mallet 29 Sep '16

29 Sep '16

Hello, I have many Alcatel Lucent routers in my backbone. Since I have add these routers, my eventlog is flooded by "Interface changed: [ifConnectorPresent]": http://img15.hostingpics.net/pics/712223floodalcatel.png I have 1274 eventlog pages for the router in example :-/ Do you have the same problem? Thanks, Johann

3 6

Using Obserivum on server with multiple interfaces/vlan?
by Johann Mallet 29 Sep '16

29 Sep '16

Hello, Simple question : We need upgrade our Observium deployment with multiple networks (public & private). Does Observium have any issue accessing nodes via more than one server interface? Whether two different physical ports or two different vlans on the same port? Some proprietary vendor NMS solutions are somehow locked to one interface only and cause great trouble. :o) Thanks, Johann

2 2

Bandwidth Reporting Off
by Talk Jesus 28 Sep '16

28 Sep '16

I’ve been using Observium for a while and there seems to be some discrepancies between my graphs and the upstream (my data center provides me Ethernet GigE bandwidth). For example, from around 8am to 12pm today it showed overall utilization pretty consistent well above 400Mbps. These switches are actually trunked (2 x 3650 L3 switches). In the graph, it shows the uplink to switch #2 connectivity calculated with the total utilization (VLAN2155). This is definitely not accurate as it shouldn’t do that as far I’m concerned. Total utilization should simply be Drops #1 & #2, which covers all VLANs on both switches. Example: Drop #1 = 40Mbps Drop #2 = 200Mbps Uplink to Switch #2 = 130Mbps Now as a result VLAN2155 (total utilization) is calculating not only #1 and #2 drops from the upstream, but even the trunk port labeled “Uplink to Switch #2”. I disabled polling on that uplink port and the total utilization (VLAN2155) is still far higher than what the output is for the past 24 hours from the upstream provider. They show 187Mbps past 24 hours (95th), 219M In / 202 Out. I show 266M In / 182M Out. Why is it so drastically different? Why is Observium calculating the “uplink” to the trunked 2nd switch in the total utilization graph? This is throwing off accuracy.

5 9

VRF/BGP/OSPF discovery in vrf-lite (nx-os)
by Stef Renders 28 Sep '16

28 Sep '16

Hi Does anyone know whether it is currently possible to discover bgp/ospf routing instances within a VRF on the NX-OS platform ? We migrated from IOS to NX-OS, IOS was passing them through snmp just fine. But NX-OS requires snmpv3 contexts for vrf resources. A full walk in the 'default-vrf' does not contain any metrics for the vrf's running on this VDC. The problem is more or less described here as well: https://github.com/librenms/librenms/issues/280 Kind regards Stef

4 6

Port Group / Entity Question
by Pico Leto 28 Sep '16

28 Sep '16

Hi, Can a port group contain multiple entities checks? I'm trying to just group our carriers for each location into port group. For instance I have our isp/carriers listed in the following format for the port descriptions on our routers L3:CKTID:DEMARC COG:CKTID:DEMARC My entity matches on either of those but when I combine them like the following below, I don't see any devices being associated with it. ifAlias matches *COG:* ifAlias matches *L3:*

2 1

Update Error
by Talk Jesus 28 Sep '16

28 Sep '16

Trying to update my CE from 15x to the latest http://www.observium.org/docs/updating/ Ran: cd /opt mv observium observium_old wget -Oobservium-community-latest.tar.gz http://www.observium.org/observium-community-latest.tar.gz tar zxvf observium-community-latest.tar.gz mv /opt/observium_old/rrd observium/ mv /opt/observium_old/*log* observium/ mv /opt/observium_old/config.php observium/ [root@rtg opt]# /opt/observium/discovery.php -u PHP Fatal error: require(): Failed opening required '/opt/observium/config.php' (include_path='.:/usr/share/pear:/usr/share/php') in /opt/observium/includes/sql-config.inc.php on line 26

4 9

Can't Hide Search
by Talk Jesus 28 Sep '16

28 Sep '16

Upgraded to latest CE version yesterday. Now the layout is different from 15x and the big search box on the left side of the port listing or device listing won't hide. I replicated this 2 browsers as well.

3 3

Re: [Observium] Cisco subinterfaces
by ron＠rjr-services.com 28 Sep '16

28 Sep '16

Yeah, that command. ;-) Get Outlook for Android On Wed, Sep 28, 2016 at 7:46 AM -0500, "Markus Klock" <markus(a)best-practice.se> wrote: -- This message has been scanned by E.F.A. Project and is believed to be clean.

1 0

Cisco subinterfaces
by Mirditor Kuçaj 28 Sep '16

28 Sep '16

Hello Lost the graphs on subinterfaces and portchannels. We rebooted a 7604 with IOS 15.4(3)S2 and monitored with Observium 0.16.9.8104. Somehow the graphs ID-are changed and doesnt belong to the same subinterface/portchannel. Thx Mirditor Kuçaj Backbone miri(a)abissnet.al <mailto:miri@abissnet.al> Abissnet Sh.a. +355 69 60 91 364 +355 (0)44 300 003 Ext 139 Rr. Ismail Qemali, Pallati Abissnet, Tiranë <http://www.abissnet.al/> www.abissnet.al <https://www.facebook.com/Abissnet> <https://plus.google.com/u/0/+AbissnetalISP> <https://www.linkedin.com/profile/view?id=AAIAABqLWRAB88ljU6t8b67oVm8PAlvPrh mPybE&trk=nav_responsive_tab_profile%20>

2 1

Re: [Observium] Cisco subinterfaces
by ron＠rjr-services.com 28 Sep '16

28 Sep '16

Please review this Cisco document regarding interface persistence. This is likely the issue you are seeing, not a problem with Observium itself. http://www.cisco.com/c/en/us/support/docs/ip/simple-network-management-prot… There is a command you can include in your configuration that will keep interface numbering persistent across reboots. I just don't recall it exactly off the top of my head, or I would include it here. ... Ron Get Outlook for Android On Wed, Sep 28, 2016 at 7:34 AM -0500, "Mirditor Kuçaj" <miri(a)abissnet.al> wrote: -- This message has been scanned by E.F.A. Project and is believed to be clean.

1 0

Trunk Issues
by Talk Jesus 28 Sep '16

28 Sep '16

I've been using Observium for a while and there seems to be some discrepancies between my graphs and the upstream (my data center provides me Ethernet GigE bandwidth). For example, from around 8am to 12pm today it showed overall utilization pretty consistent well above 400Mbps. I have two drops from them: primary and secondary (redundant). Plus, they both show active instead of active/passive. Not sure if that has anything to do with it. >From the tech: "95th percentile is calculated from both ingress and egress traffic. For example, if you used a constant 200Mbps up and down, then you would only be charged your commit of 200Mbps, not double. I do see what you mean that the two handoffs (layer 2) are equaling more than 300Mbps, but when you look at the Aggregate (layer 3) graph at the top, it does not go over 300Mbps. These packets can possibly be queued before going out so you don’t go over your commit. " So, what do you think might be causing this hiccup? I noticed this too: so these switches are actually trunked (2 x 3650 L3 switches). In the graph, it also shows the uplink connectivity calculated with the total utilization. This is definitely not accurate as it shouldn't do that. Example: Drop #1 = 40Mbps Drop #2 = 200Mbps Uplink to Switch #2 = 130Mbps Now as a result VLAN2155 (total utilization) is calculating not only #1 and #2 drops from the upstream, but even the trunk port labeled "Uplink to Switch #2". How can I rectify this with Observium to avoid that and get an accurate output?

5 11

Can't Add Device
by Talk Jesus 28 Sep '16

28 Sep '16

Trying to add my secondary trunked switch, but I get this error "Could not ping switch2.mydomain.com." I ran a DNS lookup on that hostname and it shows the records fine and the switch (#2) accurately. I tried adding the device using the same setup as the original switch that's already there: port 161, udp transport, v2c protocol version, snmp community same as primary. I can ping the hostname too, not sure why Observium cannot.

2 5

False positives on Device Alerts
by Timothy Kaufman 27 Sep '16

27 Sep '16

We have an SE installation with about 260 devices being checked. We have alerting setup for various services or checks. Often we see false positives on the SNMP device down alert, for example devices will report SNMP down when they are not really down. After a second or even third SNMP check we see a recovery and the uptime shows no outage. I also verify this by doing and snmpwalk from observium while the “alert” is active. Is there anything we can check or begin to look to find the cause. The server is not overloaded, with either memory or processor. We are running 25 poller wrappers with a complete polling time of about 300 seconds. Thanks, Tim

4 5

Poll Observium Agent using TLS
by Matthias Gabathuler 27 Sep '16

27 Sep '16

1 0

Observium with smokeping and rrdcached
by Lyndon Labuschagne 27 Sep '16

27 Sep '16

Hi is it possibly to get smokeping integrated with Observium if you are using rrdcached? I get permissions issues, but id I disable rrdcache then I can see the smokeping graphing?

1 0

Re: [Observium] Sensors auto-deleted and re-added.
by Henrik Cednert (Filmlance) 27 Sep '16

27 Sep '16

And now it have started to do it frequently. =( Never had this issue before. Anyone with a clue to why it’s happening? 2016-09-24 06:40:58 netbotz01 Sensor deleted: humidity apc memSensorsHumidity.0.4 Temp/humid 2016-09-24 06:40:58 netbotz01 Sensor deleted: temperature apc memSensorsTemperature.0.4 Temp/humid 2016-09-24 06:40:53 netbotz01 Temp/humid Sensor added: temperature apc emsProbeStatusProbeTemperature.4 Temp/humid 2016-09-24 06:40:53 netbotz01 Temp/humid Sensor added: humidity apc emsProbeStatusProbeHumidity.4 Temp/humid 2016-09-24 00:37:49 netbotz01 Sensor deleted: humidity apc emsProbeStatusProbeHumidity.4 Temp/humid 2016-09-24 00:37:49 netbotz01 Sensor deleted: temperature apc emsProbeStatusProbeTemperature.4 Temp/humid 2016-09-24 00:37:45 netbotz01 Sensor added: humidity apc memSensorsHumidity.0.4 Temp/humid 2016-09-24 00:37:45 netbotz01 Sensor added: temperature apc memSensorsTemperature.0.4 Temp/humid 2016-09-23 18:38:05 netbotz01 Sensor updated (limits): limit_low -> "0" 2016-09-23 12:40:44 netbotz01 Sensor deleted: humidity apc memSensorsHumidity.0.4 Temp/humid 2016-09-23 12:40:44 netbotz01 Sensor deleted: temperature apc memSensorsTemperature.0.4 Temp/humid 2016-09-23 12:40:40 netbotz01 Sensor added: temperature apc emsProbeStatusProbeTemperature.4 Temp/humid 2016-09-23 12:40:40 netbotz01 Sensor added: humidity apc emsProbeStatusProbeHumidity.4 Temp/humid 2016-09-23 06:38:32 netbotz01 Sensor deleted: humidity apc emsProbeStatusProbeHumidity.4 Temp/humid 2016-09-23 06:38:32 netbotz01 Sensor deleted: temperature apc emsProbeStatusProbeTemperature.4 Temp/humid 2016-09-23 06:38:28 netbotz01 Sensor added: humidity apc memSensorsHumidity.0.4 Temp/humid 2016-09-23 06:38:28 netbotz01 Sensor added: temperature apc memSensorsTemperature.0.4 Temp/humid -- Henrik Cednert cto | compositor Filmlance International | www.filmlance.se mobile [ + 46 (0)704 71 89 54 ] skype [ cednert ] On 2016-09-21, 14:05, "observium on behalf of Henrik Cednert (Filmlance)" <observium-bounces(a)observium.org on behalf of henrik.cednert(a)filmlance.se> wrote: Hey Anyone with an idea to why this would happen on its own? 2016-09-21 12:38:54 Sensor deleted: humidity apc emsProbeStatusProbeHumidity.4 Temp/humid 2016-09-21 12:38:54 Sensor deleted: temperature apc emsProbeStatusProbeTemperature.4 Temp/humid 2016-09-21 12:37:58 Temp/humid Sensor added: humidity apc memSensorsHumidity.0.4 Temp/humid 2016-09-21 12:37:58 Temp/humid Sensor added: temperature apc memSensorsTemperature.0.4 Temp/humid An APC/Schneider Netbotz200. Cheers -- Henrik Cednert cto | compositor Filmlance International | www.filmlance.se mobile [ + 46 (0)704 71 89 54 ] skype [ cednert ] _______________________________________________ observium mailing list observium(a)observium.org http://postman.memetic.org/cgi-bin/mailman/listinfo/observium

2 2

No devices found
by Skelkelos 25 Sep '16

25 Sep '16

Hi, I am having an issue with latest Observium release 0.16.9.8086 (9th September 2016), after updating to latest revision the discovery/polling is still working fine according to logs, however the web interface shows 'No devices found' and can't access any data. Any hints on how to solve this issue or investigate further ? Resetting the search parameters doesn't help. Best regards, Alessandro

2 5

Disabled devices showing on front page
by Ben Hohnke 25 Sep '16

25 Sep '16

Hi Guys, We updated our observium installation yesterday, and since then we're getting alerts (from the alert module) and front page alerts for devices that are disabled. The version we're running is 0.16.9.8092 (rolling). I really don't want to delete these devices, as the historical data is useful.. [image: pasted1]

3 3

Storage not showing all filesystems
by andres fariña 23 Sep '16

23 Sep '16

Hi All, I have an issue at this Observium version: *Observium* 0.16.8.8068 (23rd August 2016) *OS* Linux 3.0.101-0.7.17-default [amd64] (SUSE LINUX 11) *Apache* Apache *PHP* 5.6.9 (OPcache: ENABLED) *Python* 2.6.9 *MySQL* 5.6.27-log (extension: mysqli 5.0.11-dev) *SNMP* NET-SNMP 5.4.2.1 *RRDtool* 1.4.7 >From snmpwalk I can see filesystems: HOST-RESOURCES-MIB::hrStorageDescr.31 = STRING: / HOST-RESOURCES-MIB::hrStorageDescr.35 = STRING: /boot HOST-RESOURCES-MIB::hrStorageDescr.36 = STRING: /dev/shm HOST-RESOURCES-MIB::hrStorageDescr.41 = STRING: /audios/voicemails But at Observium I only got these two: Any ideas? Regards, Andrés

3 4